skysight-inc/HackerNews huggingface dataset:
The article explains this rationale very clearly:

> Using Go 1.20, that mistake is a serious security problem that merits a detailed investigation to understand the damage. Where were the keys used? How were the keys exposed? Were other random outputs exposed that might allow an attacker to derive the keys? And so on. Using Go 1.22, that mistake is just a mistake.

It is not masking a mistake - you should be using a CSPRNG in security sensitive contexts, however if you screw up the collateral damage is much lower. You should be detecting this mistake with static analysis and code audits rather then observing the random number generator on prod.
I think Xenophon's Anabasis is an excellent treatise on leadership and crisis management, and his Hellenica is also a great look at the sources of and risks to moral authority.
I can't really understand what you said, could you elaborate? :)
Wanlanid, a new way of self-growth in a distracting world
> Mainly privacy of communication doesn't always imply anonymity, through sometimes does (and has too!).

Anonymity is simply people not knowing who you are, not necessarily what you say. It's not privacy of communication, but privacy of identity.

I can post on the internet as Anonymous Coward, and those posts are public even though my identity is private.

I can encrypt an email and send it, and it will be picked up by all the relays. They can look up the source and identify me, but hopefully not read the email contents.
When did Woolsey alter the meaning and succeed? Sometimes he found a true translation that was underappreciated by an ignorant fanbase (the notorious spoony bard), sometimes he did the best he could while constrained by censorship that still compromised the results, and sometimes he straight-up screwed up.
Well, yes, but both the toothbrushes and the brush heads are sold only with the "Oral-B" name in most countries. That is: Braun logo still appears on the device, but not in the product name, box, and marketing materials.
This is not the first time they have provided recovery emails to the feds.

https://www.forbes.com/sites/thomasbrewster/2023/08/08/proto...

Archive: https://web.archive.org/web/20230814144638/https://www.forbe...
Flashbacks to making a nice email template for a company only to find out their entire client list used outlook from a decade earlier and could just about render plaintext. There was no point in me even showing up.
It follows that all of our other cost-plus highly distributed military contracts must also be a massively inefficient waste of taxpayer money - compared to a SpaceX approach. (We knew that, but it's an unavoidable implication from this article.)
15 Years of Formal Methods at AWS: Just Good Engineering Practice?
One thing to note is the authors mostly have "AI for science" in mind, instead of machine learning in general. Quite a few examples in the paper are about discovering new conservation laws.
Restrict probably helps. I can't say much about fortran but C still has warts that can significantly impact its math library. For example almost every math function may set errno, that is a sideeffect that isn't easy to eliminate by the compiler and might bloat the code significantly. For example with gcc a single instruction sqrt turns into a sqrt instruction, followed by several checks to see if it succeeded, followed by a function call to the sqrt library function just to set errno correctly. I just started to disable math-errno completely once I realized that C allows several alternative ways to handle math errors, which basically makes any code relying on it non portable.
It is useful but at the same time different teams IIRC had different design doc structures. I was overwhelmed by go/greendoc when I was an intern and I just opened an empty doc and started writing based on my team's existing design docs... and that worked better. In the end it is just technical writing.
Java 22 improves Java's versatility across a wide range of applications and aids with native code integration. It facilitates the creation of clean code by Java developers and helps them integrate cutting-edge new technologies. Maintaining alignment with contemporary software development technology is aided by it. Numerous small and medium-sized companies (SMBs) and corporations outsource their needs for software development in order to avoid the inconvenience of inadequate technical know-how and resource management. Businesses can hire Java developers or a team to complete their project requirements through outsourcing.
> you can't specify which style in rubocop you want code refactored to

You can, with the per-cop `EnforcedStyle` configuration key.

I hate browsing the Rubocop doc so I just put the cop name with that config key set to a bogus value, then Rubocop yells at me about the invalid value and lists the available ones.

There can be more than EnforcedStyle, e.g see these for Style/HashSyntax (scroll up for examples), which autocorrect will respect:

https://docs.rubocop.org/rubocop/cops_style.html#configurabl...
Radically Open Security has donated 1M Euro to NLnet
And I will never forgive them for it. I aggressively uninstall all traces of ubuntu-desktop after a new build, and usually regret doing so by the end of the night.
The criticism seems pretty fair. Not sure how filmable the book is especially given the constraints of the time.
For Garmin watches, auto activity tracking is under Settings > Activity Tracking > Status On. This shows up in Garmin Connect under graphs such as Body Battery, Heart Rate, etc. These auto tagged items don't show up as discreet activities and will not show up in other systems like Strava.

This is on the Forerunner 945 and will auto tag things like walks, runs, and cycling.
Pretty much all economic "problems" are symptoms of some greater social and/or regulatory issues. The bigger problem is that the "we must do something" response tends to have coinflip odds at least of making things worse, a la the cobra effect.
Video: https://youtube.com/watch?v=HxP4wi4DhA0
Yes, that was what was linked. I can read. What is your point?
> 30% of the 489 women polled - almost one in three - said they had experienced abuse and toxicity when gaming online

> Of this 30%, the majority (72%) said the abuse was misogynistic. By comparison, none of the male respondents reported any gender-based discrimination or abuse
So long, and thanks for all the podcasts
I've been using ChatGPT's new memory feature. It's buggy, but when it works it's quite cool. It feels like a glimpse of something big. Since it began making me aware that it remembers my activities, I've been pushing myself to achieve things. It's like having an audience. I wouldn't have expected that: when the machine is smart, I want to impress it, just like I'd want to impress a person I respect.
Now combine this with Jupyter notebooks and we are good to go. I'd pay for that.
Or if you’re going to learn another language might as well learn nim. Keep most of the python syntax, ditch the performance and the packaging insanity.
Show HN: Compete with compiled aiohttp using HTTP/2 and HTTP/3
MJML is better than most but remember every templating language has a footprint.

When possible reduce your html code weight to the bare bones minimum. Nothing too fancy. Keep it logical. After a bit of practice it’s actually easy and in my opinion often faster than MJML (For example MailJet. Don’t even get me started on Klaviyo.)

Even with minimal coding/hmtl experience you can run your code through GPT-4/Bard.

Bonus for including custom instructions such as “transactional intent”, Bayesian/heuristic filtering, coded for users with poor digital accessibility, under-served internet users, etc.

Even with the best domain domain/ip reputation without a positive engagement history specific to that user you will often land in promotions/other tab and not the primary tab for new users with a heavily weighted creative.

Remember you want to mimic “an email from Grandma” while maintaining some degree of control of visual design.

Or if that’s too complicated just keep your subject line under three words and all lowercase.
I was unaware that you're only allowed to publish something if it's fully complete, to the satisfaction of randos on hacker news. Are you actively trying to discourage people from posting their projects or is that just an accidental side-effect?
SpaceX’s key insight was that the hardest part about building rockets was components manufacturing and attacked that problem aggressively, bringing in as much in-house as possible vs. outsourcing to a nationwide supply chain.

And there is no real secret to a lot of their manufacturing methods either. They just attacked hard problems aggressively with really smart people and clear leadership.
I'm Aussie and a native plant society person. Will come along to your meeting next week and we can chat about it.
I think you misread the comment you responded to.

It didn’t mean ”I suspect that what they are getting from Amazon isn’t a dedicated server”.

Rather it meant ”I suspect that they’re getting a dedicated server from somewhere else that isn’t Amazon”.

The original comment was talking about a dedicated machine for personal projects with a fixed cost of $40/month.
If you had typed half your comment into a search machine instead of the HN comment box, you would've gotten an answer.
Same here, we've been using HAProxy for years now and only gets to improve
> Did SpaceX poach all of Boeing/Airbus' best people?

No

For one, SpaceX can't even hire non-citizens from what I understand

But yeah they probably poached some ULA, some LM, also from some other companies.
Definitely. I'd actually go one step further and say that they will eventually lose a crew of astronauts. Perhaps to the ISS, but most definitely to Mars. The Falcon is the most reliable rocket ever made with some 335 successes for 2 failures contrasted against e.g. 133 and 2 for the Space Shuttle, but that failure rate is still extremely high relative to something like an airplane. And the overwhelming majority of all space flights are for "simple" repetitive tasks. As we increase the number of manned missions, as well as their complexity - the eventual loss of crewed missions is an absolute certainty. Something like 3% of all astronauts have died 'on the job' making it likely the single most dangerous profession in existence. Space remains extremely complex and dangerous, and it's likely to only become even more so in the decades to come as we increase the complexity of tasks carried out.

The reason NASA's failures were such a huge deal is because they shouldn't have happened. In both cases you had issues with the managerial layer ignoring the engineering layer, and moving ahead in high risk scenarios - that was particularly stupid in Challenger, where they also had a high profile civilian aboard. In SpaceX the managerial layer and the technical layer are largely the same thing, and they also have a system where any flight engineer can independently cancel a flight, for any reason, at his own discretion. So the chances of a flight moving forward with a predictable risk is quite low. So what will most likely happen when they lose a crewed flight is an investigation to ensure it was not caused by systemic errors, some effort to ensure that whatever did happen does not happen again, and then a return to flight.
Venn diagram of Greek, Latin, Cyrillic uppercase glyphs
I wonder if this is how they pick letters to use for license plate numbers?

It's also a bit funny that Latin has a distinct collation order compared to Greek and Cyrillic; I wonder when that happened? Before or after Etruscan?

Phoenician 𐤀‎𐤁‎𐤂‎𐤃 (ⴰⴱⴳⴷ Tifinagh) yet we use ABCD...

(C is itself funny, because С is in the same place on the keyboard)

EDIT: aha, it looks like etruscan didn't distinguish voicing for stops, so when the latin alphabet needed to make the voiced/unvoiced distinction, hard C wound up where G used to be.
A better way to frame it instead of one user per project, is to have one persona (casual me, working me, planning me) per workspace, each of which can only be used by one identity on the whole machine.
It’s one thing to market to adults, but targeting teens is just plain wrong. Some people might argue that if teens are searching for these hashtags themselves, it's not technically marketing. But we all know how influential social media is, especially on teens. As someone who's seen my friend's kid fall into the vaping trap during high school, I wish this content was more regulated.
A subset of markdown (since you can use html in markdown) might be a good candidate.
Honestly, this is one of the best things I’ve watch this year
Maybe he meant "copetitors at the same scale"- At oleast thats how I read it.
Google is trying to clean up in fear of AI based competition?
> none of the Geneva Conventions should apply to them.

The Geneva Convention is (currently) humanity's best attempt at codifying ethical aspects of war. Unfortunately, it is not some lofty goal to aspire to. Oh no. It is the result of discussion and compromise. In other words, it literally is the lowest possible ethical standard we agreed to hold each other to. We should strive to do better, not worse.

Therefore:
all of the Geneva Convention applies, always, to everyone.
Location: Nairobi,Kenya

Remote: Yes

Willing to relocate: Yes

Technologies: React js, react native,Next js, C, Python, Php laravel.. Code igniter , Java, HTML, CSS, Git, MySQL..... And open to learn new technologies

Resume/CV:https://www.linkedin.com/in/lebu-ayiga-1b93261b6

Email: lebu.a.7@gmail.com

Graduated with a certificate on MIT from Emobilis Training institute then pursued a diploma in computer science and am currently continuing with my bachelors degree. Am open to full-time or internship remote jobs that would help me build my experience. I have no professional experience but i have worked on personal projects as well as group projects from our schools Google Developer Student Club

I would love to work in an organisational level so i canbe able to contribute my skills
virtual network interfaces are a thing
There was also this site to simulate area affected :
https://www.nukethis.com/
You have a point in that bureaucracy can needlessly get in the way of meaningful change. It frankly always will to some degree. That being said, part of the way you make sure it gets the least amount of in the way is to standardise it, and actually enforce those standards.

From your description you fall into both categories, which means your colleague was correct. Now, your amount of details is very scarce, so it’s extremely likely that I’m getting the situation wrong. But look at it from an enterprise level perspective or change management, if you allow slight deviations here and there for thousands of employees then you’ll very quickly end up with what would be the equivalent of the difference between Italian, Spanish and French. Which all shares the same Latin “standard” and then deviated ever so slightly.

If you think there is a lot of pseudo work involved with managing the bureaucracy of enforcing a design doc standard then you should see just how much pseudo work it saves.
Selling links is a multi billion dollar industry that no one ever has dared to put a finger on. If you want, you can get editorial links from sites like The New York Times, Forbes, etc. so as long as you have a few thousand dollars to spare.

For an average scenario, let's say - an article about "AI tools for text-to-speech", if that article ranks well in Google - you can easily sell top spots in it for $999 and no one will be any wiser. This isn't something that Google can ever control, but it is a thing. And because it is a thing, it has also highly contributed to the well-known SEO problem.

Google has said it takes links less seriously these days, but the prices for buying sponsored posts / guest posts haven't really fluctuated much in the last 10 years.

Publishers like Forbes, who at one time was considered the 'de facto' source for all things business, are able to capitalize from their strong "domain authority" to pump out articles in any given category: business, tech, drama, pop news, web dev, etc. So as long as there is a potential for a small affiliate income - Forbes will make itself an expert on the matter.

This pushes out small publishers who might be experts on the topic, or at the very least have direct day-to-day interaction with the topic, who will never be able to compete with Forbes (or any other such site) because inherently the Google system is broken. The small publisher simply doesn't stand a chance, and what Google is doing now is a band-aid fix that will avoid penalizing the entire domain and focus on 'specific sections', yet it's the site itself that is responsible for these actions.

Forbes got so scared of this update they 410'd their entire coupons directory[0][1], so what will Google do about this? Give them a pass? It's blatant manipulation.

[0]: https://www.seroundtable.com/forbes-completely-removes-coupo...

[1]: https://www.forbes.com/coupons
One thing I've always wondered about these kinds of simulations is how they deal with numerical issues, since I assume they are needing to use both very small and very large numbers. Additionally, even in simple classical physics integration errors can add up very quickly, so wonder how this problem is avoided when working with these kinds of scales. Similar thoughts for things like galaxy simulations, or simulations of planet-sized collisions, etc.
Quite possible. I don’t hold much hope but I wouldn’t mind results getting a bit better. They’re currently a bit of a shitshow.
Google results are just terrible and entirely corrupt from all sides. Everything from the bottom up is pay to play. From affiliate SEO spammers to Google back room deals with big players.

I’ve been a happy Kagi user for a year now. Never going back.
Allan da best
Google recaptcha has been failing to catch the spam signups for the past few months.

I hope this deters them
Merely that however succinct there's a clear-cut rationale, I read your comment as if there were none but that may be due to lack of caffeine on my side.

In that context, the quoting was just for highlighting.
Guily as charged - I should have payed more attention to my wording.
I think this is one of the janky PoC’s I recalled from the ‘oughts. I don’t really like large touch surfaces (they remind me of broken interactive displays in museums), but I’m surprised the concept hasn’t evolved further.
Carlos Moreno Wanted to Unclog Cities. Now He's 'Public Enemy No. 1.'
https://archive.ph/WMDTC
This is it. If you don't complain everybody can pretend this is business as usual. I would probably try to be very strategic with my complaints, since you want to make each of them count — and that does not happen if you are known to complain instead of delivering.

The writer hinted at being from the former Soviet Union, with especially Russia being culturally famous for seeing merit in an individuals ability to suffer. I am not saying the author themselves believes this, but declaring you belong to a class without human rights, which can't complain (which is factually not true) and presenting this as your fate which you now stoically carry is a suspiciously close to that cliché.

I am not saying the text has no points or doesn't accurately portrait parts of reality, what I say is that the conclusion it seems to draw fits very much with the cultural background. I prefer an approach of calculated optimism more — that means you know things are shit and there is conflict, but you also know that there is no use in moving forward based on that world view unless you want to move down a spiral where things get even worse — so you insert your own calculated optimism, a assumption that the world is better than it is, people are more understanding, more intelligent and more caring than they are and so on. Of course you are fully aware that it is essentially not true, but hey, how else to educate a child than the show them how it is being done?

How would hacker news look like if instead of calculated optimism (relying on a positive interpretation of what the other wrote) we would all choose a realistic or even a pessimistic reading of what the other intended to say? The discourse would turn into shit pretty fast.

Turns out clculated optimism works even better if everybody does it and there is such a thing as institutional culture — and just like traffic it turns put if you complain about it, you are likely part of the problem.
Would you say elections from 20 years ago are representative of the political mood in your country today?

Also:

1. Most of the current population wasn't born then.

2. Voting for the political wing of a violent group isn't the same as supporting violence. Sinn Fein, the political wing of the IRA, are the biggest party in Northern Ireland almost 30 years since the cease fire.
the "attack" is widely known and is used as a config option for the openvpn client (redirect-gateway def1)
In total, for a 15-year old cat, I have spent $8,000+ USD. He plays a large emotional part in my life and I don't think I would spare any expenses given the opportunity. It is worth it.
My understanding is that they didn't need his agreement in the first place, but they voluntarily entered into a contract with Kubrick that gave him the final say on publishing in exchange for him agreeing to be interviewed for the book.
> They said many of the people they know only accept plaintext, not all of them.

And parent said "you don't know enough people", not "you don't know any people".
Migadu is Swiss
Nice, now I can have the nice concurrency syntax with the error handling I know and love. ♡
Do you mean they fixed the hijacking by adding the "async" keyword?

By the whole thing do you mean the async functionality in Python in general? What is the tragedy?
Not just teenagers.

How many adults have you come across who (inappropriately) describe pedantry as OCD, or losing focus from time to time as ADHD, or being a bit withdrawn as 'autistic'?

There's no scope for people to simply be imperfect people with imperfect character traits any more. Any minor deviation is considered to be a personal disability.

That's not to say ADHD and OCD and autism don't exist—of course they do. And I also believe that they've been under-diagnosed historically. But not all symptoms are diseases. I don't know how we solve it without ignoring people who really need help, but it's definitely an issue.
GCC 14.1 Release
> My comment is meant to be a joke about how some of this stuff is grimly academic.

Well it's not "academic" if it occupies quite a bit of the public debate, and it's also not helpful if it's actually fairly easy to debunk, and is just fuel for the "they will make up anything to make us look bad" line. All of that energy can and should be spent elsewhere.
I don't know what to tell you other than skill issue.

I don't think shell is a great language or even that good for configuration, but it is pretty simple and the quantity of footguns are similar to JavaScript.

My issue with systemd is not the configuration file/language, that bit is pretty cool. My issue is mostly with all of the half-assed auxiliary services they keep pushing and something is not quite right with systemd itself, the complexity causes issues with weird edge cases.

Early in my career I was all for systemd, thought it was the greatest thing ever, then I got bit by the edge cases a few too many times. Meanwhile I have had zero issues with openrc or s6.
If there's a random offset applied, how would they have access to the actual system uptime?
+1 for the IXL ios app. My 6 y.o. son’s school doesn’t give homework and its math pace seem lagging with the standards so I supplement his math learning with the IXL app.

I like that they offer several different ways of explaining / visualizing concepts plus exercises that reinforce.

For example, my sons is starting to learn multiplication and finally clicked with the app’s visualization of how multiplication is just repeatedly adding the same number over and over again.